Secure Computing SG300 User Manual page 80

By default, machines on the DMZ network have addresses in a private IP address range,
such as 192.168.1.0 / 255.255.255.0 or 10.1.0.0 / 255.255.0.0. Real world addresses
may be used on the DMZ network by by unchecking Enable NAT from DMZ interfaces
to Internet interfaces under the Advanced tab. See the Network address translation
section later in this chapter for further information.
Configuring a DMZ connection
Select Direct Connection from the Configuration pull-down box of the network port to
be connected to the DMZ. Enter appropriate IP address settings and select DMZ from
Firewall Class pull-down menu.
Configuring a Direct Connection is described in detail in the section entitled Direct
Connection towards the beginning of this chapter.
Services on the DMZ network
Once you have configured the DMZ connection, configure the SnapGear unit to allow
access to services on the DMZ. There are two methods of allowing access.
If the servers on the DMZ have public IP addresses, you need to add packet filtering
rules to allow access to the services. See the section called Packet Filtering in the
chapter entitled Firewall.
Network Setup
74